This vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting (up to version 1.5.8) involves incorrect privilege assignment that can lead to privilege escalation. An attacker with some level of access could exploit this flaw to gain elevated privileges, potentially compromising confidentiality, integrity, and availability of the system. The CVSS score of 8.8 reflects the high impact and ease of exploitation. No patch or official remediation guidance has been provided yet, and the product is not a cloud service.

Successful exploitation allows an attacker to escalate privileges, resulting in full compromise of confidentiality, integrity, and availability of the affected system. This can lead to unauthorized access to sensitive data and control over system functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected system to trusted users only and monitor for suspicious privilege escalation attempts.